Collaborate Disseminate
Cybersecurity researchers on Wednesday disclosed 14 vulnerabilities affecting a commonly-used TCP/IP stack used in millions of Operational Technology (OT) devices manufactured by no fewer than 200 vendors and deployed in manufacturing plants, power gen… Continue reading Critical Flaws Affect Embedded TCP/IP Stack Widely Used in Industrial Control Devices
Three distinct clusters of malicious activities operating on behalf of Chinese state interests have staged a series of attacks to target networks belonging to at least five major telecommunications companies located in Southeast Asian countries since 2… Continue reading Chinese Hackers Target Major Southeast Asian Telecom Companies
Cybersecurity researchers on Monday disclosed a set of nine vulnerabilities known as “PwnedPiper” that left a widely-used pneumatic tube system (PTS) vulnerable to critical attacks, including a possibility of complete takeover.
The security weaknesses,… Continue reading PwnedPiper PTS Security Flaws Threaten 80% of Hospitals in the U.S.
A new highly capable and persistent threat actor has been targeting major high-profile public and private entities in the U.S. as part of a series of targeted cyber intrusion attacks by exploiting internet-facing Microsoft Internet Information Services… Continue reading New APT Hacking Group Targets Microsoft IIS Servers with ASP.NET Exploits
The maintainers of Python Package Index (PyPI) last week issued fixes for three vulnerabilities, one among which could be abused to achieve arbitrary code execution and take full control of the official third-party software repository.
The security wea… Continue reading PyPI Python Package Repository Patches Critical Supply Chain Flaw
Healthcare and education sectors are the frequent targets of a new surge in credential harvesting activity from what’s a “highly modular” .NET-based information stealer and keylogger, charting the course for the threat actor’s continued evolution while… Continue reading Solarmarker InfoStealer Malware Once Again Making its Way Into the Wild
Cybersecurity researchers on Friday unmasked new command-and-control (C2) infrastructure belonging to the Russian threat actor tracked as APT29, aka Cozy Bear, that has been spotted actively serving WellMess malware as part of an ongoing attack campaig… Continue reading Experts Uncover Several C&C Servers Linked to WellMess Malware
As many as eight Python packages that were downloaded more than 30,000 times have been removed from the PyPI portal for containing malicious code, once again highlighting how software package repositories are evolving into a popular target for supply c… Continue reading Several Malicious Typosquatted Python Libraries Found On PyPI Repository
An ongoing malicious campaign that employs phony call centers has been found to trick victims into downloading malware capable of data exfiltration as well as deploying ransomware on infected systems.
The attacks — dubbed “BazaCall” — eschew traditiona… Continue reading Phony Call Centers Tricking Users Into Installing Ransomware and Data-Stealers
A cyber attack that derailed websites of Iran’s transport ministry and its national railway system earlier this month, causing widespread disruptions in train services, was the result of a never-before-seen reusable wiper malware called “Meteor.”
The c… Continue reading A New Wiper Malware Was Behind Recent Cyberattack On Iranian Train System